Windows-Update

Security TechCenter
http://technet.microsoft.com/en-us/security/bulletin/ms11-oct

Preliminary information, subject to change. The bulletin release is scheduled for the second Tuesday of the month, October 11, at approximately 10 a.m. PDT.

Advanced notification on the release of eight security bulletins, two Critical and six Important, to address 23 vulnerabilities across Internet Explorer, .NET Framework & Silverlight, Microsoft Windows, Microsoft Forefront UAG, and Microsoft Host Integration Server.

Microsoft will host a webcast to address customer questions on the security bulletins on October 12, 2011, at 11:00 AM Pacific Time (US & Canada). Register now for the October Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

{ 0 comments }

The Microsoft Security Response Center (MSRC)

Preliminary information, subject to change. Advance Notification Service

Today we’re releasing our advance notification for the August security bulletin release, which is scheduled for Tuesday, August 9. This month’s release includes 13 bulletins addressing 22 vulnerabilities in Microsoft Windows, Office, Internet Explorer, .NET and Visual Studio. All 13 bulletins will be released on Tuesday, August 9 at approximately 10 a.m. PDT. Revisit this blog on Tuesday for our official risk and impact analysis, along with deployment guidance and a video overview of the release.

As always, we recommend that customers review the ANS summary page for more information and prepare for the testing and deployment of these bulletins as soon as possible.

The August edition of the monthly bulletin webcast will be held on Wednesday, 10 August, at 11:00 AM.. PST (UTC -8)

Register for the webcast here
Event ID: 1032487857

{ 0 comments }

The Microsoft Security Response Center (MSRC)

Preliminary information, subject to change. Advance Notification Service

This month we’ll release four bulletins, one of them rated Critical and three rated Important, addressing issues in Microsoft Windows and Office. We’ll close 22 vulnerabilities with those bulletins.

The bulletin release is once again slated for the second Tuesday of the month – July 12th at 10:00 a.m. PDT.

The monthly technical webcast next week will be hosted once again by Jerry Bryant and Dustin Childs. We invite you to tune in and learn more about the new security bulletin releases as well as other announcements to be made on Tuesday. That webcast is scheduled for Wednesday, July 13, 2011 at 11:00 a.m. PDT (UTC -7), and the registration form can be found here.

{ 0 comments }

The Microsoft Security Response Center (MSRC)

Advance Notification. Preliminary information, subject to change.

The bulletin release is scheduled for the second Tuesday of the month, June 14, at approximately 10am PDT.

There are 16 bulletins addressing 34 vulnerabilities (nine critical and seven important) in Microsoft Windows, Microsoft Office, Internet Explorer, .NET, SQL, Visual Studios, Silverlight and ISA.

One of the issues we start to address in this release is “cookiejacking,” which allows an attacker to steal cookies from a user’s computer and access websites the user has logged into. The Internet Explorer bulletin will address one of the known vectors to the cookie folder. Given the prevalence of other types of social engineering methods in use by criminals, which provide access to much more than cookies, we believe this issue poses lower risk to customers. Further, based on a signature that has been released to millions of Microsoft Security Essentials and Forefront customers, the Microsoft Malware Protection Center (MMPC) has not detected attempts to use this technique.

The June edition of the monthly bulletin webcast will be held on Wednesday, 15 June, at 11:00 AM. PST (UTC -8)

Register for the webcast here

{ 0 comments }

Microsoft Security Bulletin Advance Notification for May 2011

May 7, 2011

The Microsoft Security Response Center (MSRC) The bulletin release is scheduled for the second Tuesday of the month, May 10, at approximately 10 a.m. PDT. Advance Notification. Preliminary information, subject to change. Exploitability Index Improvements & Advance Notification Service for May 2011 Bulletin Release Since October 2008, we have used the Exploitability Index to provide [...]

Read the full article →

Second MSRT Release in April

April 26, 2011

Microsoft Malware Protection Center In continuation of our support for the takedown activities on the Win32/Afcore botnet, we are releasing a second edition of MSRT in April. This edition includes variants of Afcore released by the criminals behind it at approximately the same time as the previous edition of MSRT. While MSRT has traditionally been [...]

Read the full article →

Microsoft Security Bulletin Advance Notification for April 2011

April 7, 2011

The Microsoft Security Response Center (MSRC) Advance Notification. Preliminary information, subject to change. Today, we’re providing advanced notification on the release of 17 security bulletins, nine rated Critical and eight rated Important. This month’s bulletin release will address 64 vulnerabilities across Microsoft Windows, Microsoft Office, Internet Explorer, Visual Studio, .NET Framework and GDI+. This month [...]

Read the full article →

Microsoft Advisory-Fraudulent Digital Certificates Could Allow Spoofing

March 23, 2011

Microsoft Security Advisory (2524375) Published: March 23, 2011 Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Comodo advised Microsoft on March 16, 2011 that nine certificates had been signed on behalf of a third [...]

Read the full article →

Microsoft Security Bulletin Advance Notification for March 2011

March 4, 2011

The Microsoft Security Response Center (MSRC) Second Tuesday of the month — March 8th at 10:00 a.m. PST. Advance Notification. Preliminary information, subject to change. This month we’ll release three bulletins, one of them rated Critical and two rated Important, addressing issues in Microsoft Windows and Office. We’ll close four vulnerabilities with those bulletins. The [...]

Read the full article →

Microsoft Security Bulletin Advance Notification for February 2011

February 4, 2011

The Microsoft Security Response Center (MSRC) Advance Notification. Preliminary information, subject to change. This month, we’ll release 12 bulletins, three of them rated Critical and nine rated Important, addressing issues in Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. 22 issues will be addressed. As part of this month’s update, we’ll be addressing issues [...]

Read the full article →